Co-authored-by: fro-bot[bot] <109017866+fro-bot[bot]@users.noreply.github.com>

Co-authored-by: fro-bot[bot] <109017866+fro-bot[bot]@users.noreply.github.com>

Co-authored-by: fro-bot[bot] <109017866+fro-bot[bot]@users.noreply.github.com>

Co-authored-by: fro-bot[bot] <109017866+fro-bot[bot]@users.noreply.github.com>

Co-authored-by: fro-bot[bot] <109017866+fro-bot[bot]@users.noreply.github.com>

* docs(plan): add gateway Unit 6 mention-loop MVP plan

* docs(plan): record Unit 0 spike findings — remote-attach GO

* feat(workspace-agent): add OpenCode server lifecycle + bearer-token proxy

* feat(gateway): add Discord streaming sink for agent output

* feat(gateway): add remote-attach client and OpenCode execution core

* feat(gateway): wire @fro-bot mention to OpenCode execution with auth gate and lock

* feat(gateway): add startup stale-run recovery and mention-loop docs

* fix(gateway): harden mention-loop lifecycle and deploy contract from review

- recovery: release lock only when its run_id matches the stale run
- run-core: execution timeout via AbortSignal; fail on stream EOF before idle
- program: drain in-flight runs on shutdown, gate new mentions while draining
- config: correct OpenCode proxy port default to 9200; strict max-concurrent parse
- compose: mount the OpenCode bearer token into the gateway service
- prompt: treat mention-only messages as empty tasks

* fix(gateway): flush partial output on failure paths; tighten auth-error detection

- run: flush buffered agent output before the coarse error reply so timeouts
  and stream failures still surface partial work
- run-core: classify auth errors by numeric status only, dropping the
  false-positive string match
- recovery: document the coordination lock-identity invariant
- tests: failure-path flush, auth classification, recovery ownership-skip,
  heartbeat-stop failure path